Grouper

Grouper NÃO USE MAIS O GROUPER. USE O GROUPER2! https://github.com/l0ss/Grouper2 Um script PowerShell para ajudar a encontrar configurações vulneráveis na Política de Grupo do AD. Foto por Jon Hanson - https://www.flickr.com/people/61952179@N00?rb=1 -...

SharpGPOAbuse

SharpGPOAbuse SharpGPOAbuse ist eine .NET-Anwendung in C, die dazu verwendet werden kann, die Bearbeitungsrechte eines Benutzers an einem Gruppenrichtlinienobjekt GPO auszunutzen, um die Objekte zu gefährden, die von diesem GPO gesteuert werden. Weitere Details finden Sie im folgenden Blogbeitrag...

GroupPolicyBackdoor

GroupPolicyBackdoor GroupPolicyBackdoor ist ein Python-Dienstprogramm für die Manipulation und Ausnutzung von Gruppenrichtlinienobjekten GPOs. GPO-Angriffsvektoren können sehr oft zu wirkungsvollen Privilege-Escalation-Szenarien in Active-Directory-Umgebungen führen. Und dennoch zögern...

pyGPOAbuse

pyGPOAbuse Aggiunte di Filtri di D4RKMATT3R AVVISO: Questo è stato testato solo brevemente in un ambiente AD locale; non mi assumo alcuna responsabilità per comportamenti imprevisti o malfunzionamenti. Viene fornito così com'è, solo per test autorizzati, interamente a proprio rischio. Ora support...

CVE-2024-20674

CVE-2024-20674 Questa è la mia implementazione di un exploit della CVE pubblica CVE-2024-20674 per ottenere il bypass dell'autenticazione reciproca Kerberos utilizzando un bug logico nella gestione lato client delle risposte TGT-REP U2U di Kerberos. Può essere utilizzato, ad esempio, per servire...

adaudit

adaudit This PowerShell script is designed to conduct a comprehensive audit of Microsoft Active Directory, focusing on identifying common security vulnerabilities and weaknesses. Its execution facilitates the pinpointing of critical areas that require reinforcement, thereby fortifying your...

MDE-AuditCheck

MDE-AuditCheck Stellt sicher, dass alle Audit-Einstellungen, auf die MDE angewiesen ist, ordnungsgemäß in der GPO festgelegt sind. Das Skript benötigt die Remote Server Administration Tools RSAT...

SeriousSam

Windows विशेषाधिकार उन्नयन भेद्यता CVE-2021-36934 SeriousSAM विवरण के लिए MS लेख देखें: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36934 GPO के माध्यम से समाधान तैनात करने के लिए नीचे दिए गए कमांड को नोटपैड में कॉपी पेस्ट करें, बैच फ़ाइल .bat एक्सटेंशन के रूप में सहेजें और फिर...

gpblib

GPBLib GPBLib enthält den gemeinsamen Code, der von den Projekten GroupPolicyBackdoor, OUned und GPOddity für GPO-Manipulationen verwendet wird. Die Migration der Tools zur Verwendung der vorliegenden Bibliothek ist noch im Gange...

WindowsFirewallRuleset

Regole del Firewall di Windows Indice Regole del Firewall di Windows Indice Informazioni su Windows Firewall Ruleset Regole del firewall Framework del firewall La visione di questo firewall Licenza Requisiti Dettagli sui requisiti Non soddisfare i requisiti Primo utilizzo Avvertenza Nota Avvio...

TencentOS Server 3: sssd (TSSA-2026:0846)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0846 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Important: Red Hat Security Advisory: sssd security update

An update for sssd is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Oracle Linux 8 : sssd (ELSA-2026-46990)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-46990 advisory. - Resolves: RHEL-192053 - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege...

sssd security, bug fix, and enhancement update

An update is available for sssd. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The System Security Services Daemon SSSD service provides a set of daemons to...

sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass

A path traversal flaw was found in SSSD's AD GPO provider. The adgpoextractsmbcomponents function does not sanitize .. sequences in the gPCFileSysPath LDAP attribute, allowing an attacker with AD GPO management access to write files outside the GPO cache directory as root. On default RHEL...

Fedora 43 : sssd (2026-9ab663dcd4)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9ab663dcd4 advisory. CVE fixes: CVE-2026-12610 CVE-2026-14474 CVE-2026-14476 - rhbz2494777: CVE-2026-12610 sssd: Use-after-free crash in SSSD' 'sssdpam' process -...

SUSE SLES15: libipa_hbac-devel / libipa_hbac0 / libsss_certmap-devel / etc (SUSE-SU-2026:3195-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3195-1 advisory. This update for sssd fixes the following issues - CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole...

Important: Red Hat Security Advisory: sssd security update

An update for sssd is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass

A path traversal flaw was found in SSSD's AD GPO provider. The adgpoextractsmbcomponents function does not sanitize .. sequences in the gPCFileSysPath LDAP attribute, allowing an attacker with AD GPO management access to write files outside the GPO cache directory as root. On default RHEL...

Security update for sssd

This update for sssd fixes the following issues CVE-2026-14474: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation bsc1270709. CVE-2026-14476: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypas...